Static task
static1
Behavioral task
behavioral1
Sample
bddf6cde34d044280d99e6a7893b466d0778404676e7ca22d0eece261e5533b2.exe
Resource
win7-20221111-en
General
-
Target
bddf6cde34d044280d99e6a7893b466d0778404676e7ca22d0eece261e5533b2
-
Size
6.9MB
-
MD5
c0d53fcf8d604e3459930cc05b92eaaf
-
SHA1
d98d85f1f925d39b51cef9601a2d7421b0da2986
-
SHA256
bddf6cde34d044280d99e6a7893b466d0778404676e7ca22d0eece261e5533b2
-
SHA512
4307dd89fd1cac822b20d0333353a45f4b11a3dd7e8be9506242270e572ee09011b85c812940d50cb91e4520bd48902243d94c61320f46f5a79d4f34a7bbb9a6
-
SSDEEP
49152:Szrh20HcSyFeOJpl6IKxrrQwgTz4HhsH+oYTRayy2LFxK5e6JZp2c:+rh2RTSfQwNHhluy
Malware Config
Signatures
Files
-
bddf6cde34d044280d99e6a7893b466d0778404676e7ca22d0eece261e5533b2.exe windows x86
0dfba2061cc211cd0932f1900ab75ba5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetSpecialFolderPathA
shlwapi
StrChrIA
StrStrA
kernel32
lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetCurrentDirectoryA
GetModuleHandleA
GetTickCount
LoadResource
LockResource
RtlZeroMemory
SizeofResource
urlmon
CoInternetCompareUrl
comctl32
GetMUILanguage
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 778B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE